Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Consider deprecating X-XSS-Protection header DSL #10777

Closed
marcusdacoregio opened this issue Jan 24, 2022 · 2 comments
Closed

Consider deprecating X-XSS-Protection header DSL #10777

marcusdacoregio opened this issue Jan 24, 2022 · 2 comments
Labels
in: web An issue in web modules (web, webmvc) status: duplicate A duplicate of another issue type: enhancement A general enhancement

Comments

@marcusdacoregio
Copy link
Contributor

This header has been deprecated by modern browsers and its use can introduce additional security issues on the client side. See https://owasp.org/www-project-secure-headers/#x-xss-protection
@marcusdacoregio marcusdacoregio added status: waiting-for-triage An issue we've not yet triaged in: web An issue in web modules (web, webmvc) type: enhancement A general enhancement labels Jan 24, 2022
@marcusdacoregio marcusdacoregio added this to the 6.x milestone Jan 24, 2022
@eleftherias eleftherias removed the status: waiting-for-triage An issue we've not yet triaged label Jan 24, 2022
@jzheaux
Copy link
Contributor

jzheaux commented Jan 24, 2022

This seems related to #9631.

@marcusdacoregio
Copy link
Contributor Author

Closing as duplicate of #9631

@marcusdacoregio marcusdacoregio added the status: duplicate A duplicate of another issue label Jan 28, 2022
@marcusdacoregio marcusdacoregio removed this from the 6.x milestone Jan 28, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
in: web An issue in web modules (web, webmvc) status: duplicate A duplicate of another issue type: enhancement A general enhancement
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@jzheaux @eleftherias @marcusdacoregio